$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22c50345-6569-464c-84f3-669be61853ff.roa File: 22c50345-6569-464c-84f3-669be61853ff.roa (raw, json) Hash identifier: 8/vC3SSFVBSUTHShCW+1mOjDS3BzT2noK2OStC1UQok= Subject key identifier: DE:BC:18:F2:EC:BB:F7:68:97:12:D8:DC:08:79:2D:1C:94:DC:F8:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2ED322851C42180F1A2F9FF8E98E8CF7BB00BC57 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22c50345-6569-464c-84f3-669be61853ff.roa Signing time: Sat 18 Oct 2025 18:41:18 +0000 ROA not before: Sat 18 Oct 2025 18:41:18 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d3:22:85:1c:42:18:0f:1a:2f:9f:f8:e9:8e:8c:f7:bb:00:bc:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:41:18 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0e515c14f230f6b5de75a5eaed8f23f274dea7853363a1710a10bdd0c8d56764, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6f:4d:81:54:c3:87:13:17:79:7c:58:9d:be: 2f:07:6e:96:d6:77:61:19:27:d9:ea:b2:f0:de:f6: 93:1d:33:9e:e6:7a:c7:b7:e3:25:5d:bf:a8:6f:36: 99:f3:72:39:30:db:ee:c4:a2:4b:d0:d4:23:1b:3a: 5e:32:04:60:64:3e:d2:40:df:ea:7a:ea:71:b4:8f: 23:0b:67:d5:80:a8:66:ee:07:b3:2a:be:f2:79:83: ca:8a:6f:9b:59:05:c4:4b:87:49:e9:2c:6d:93:ac: bc:50:45:57:1f:8d:a7:79:2c:fc:30:b6:42:32:6b: c7:14:73:0d:70:09:dd:50:3c:8e:eb:aa:c0:62:d9: 46:2a:43:f0:2e:fe:ad:da:20:28:0d:93:35:80:a1: 29:06:9c:cb:01:33:52:a3:65:18:17:3f:6f:a8:2f: c6:ad:3f:a6:61:a3:0c:87:f4:96:dd:96:7f:f0:6c: e3:31:e1:67:02:fe:f6:f7:9d:ef:79:cc:ff:e8:60: e9:84:2e:4f:ca:37:4b:8e:5b:e5:ad:9f:a1:6d:e7: da:a3:eb:9d:1c:95:67:9f:5c:9c:e2:7c:da:44:91: 20:58:19:97:45:0b:62:98:8b:36:32:55:85:6d:6a: 12:f1:f4:c7:5e:53:63:27:30:6f:8b:3e:05:e0:f1: 5b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BC:18:F2:EC:BB:F7:68:97:12:D8:DC:08:79:2D:1C:94:DC:F8:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22c50345-6569-464c-84f3-669be61853ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.128.0/24 Signature Algorithm: sha256WithRSAEncryption 21:ff:3d:4f:13:ee:f5:33:b3:45:b6:ca:11:87:ef:a3:5f:df: d2:a4:b8:c7:9b:d3:b0:56:15:6c:2d:b2:5b:6d:27:99:49:89: b1:e1:c1:47:1f:25:37:e1:e9:7f:7e:8f:8b:de:dc:6b:ac:98: 61:47:c5:c6:da:44:38:c4:f7:41:6a:c7:da:6c:b9:a8:e2:6a: d6:9e:b0:71:77:96:58:ca:bf:09:3a:66:8c:47:e0:87:98:82: 3d:86:33:5a:f9:cf:85:15:fd:77:35:78:b8:bb:8a:b2:04:09: e7:e8:15:df:78:d1:08:39:14:94:13:7a:5f:95:a0:31:6a:2e: d2:3e:80:70:f6:11:4c:af:97:cf:c3:37:d4:b0:af:2a:a3:c9: f0:d3:68:94:a9:34:95:f5:75:36:43:f5:5a:80:0c:73:b0:9f: 00:ba:62:55:ee:20:40:60:59:79:eb:60:b8:3b:71:36:d1:37: 47:47:ae:c4:4e:31:ee:fd:06:3e:66:5b:67:80:b5:07:08:34: 78:21:bc:ec:90:db:24:85:ff:41:5c:1f:72:c5:cf:f2:67:86: 74:63:30:e1:7c:8a:f7:42:c5:4d:e4:75:ad:28:94:ed:23:a4: 3b:f1:67:cf:11:b1:66:6d:60:f1:33:96:f1:62:d4:31:60:e1: 30:f0:2e:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULtMihRxCGA8aL5/46Y6M97sAvFcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTg0MTE4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTUxNWMxNGYyMzBmNmI1ZGU3NWE1ZWFlZDhmMjNmMjc0 ZGVhNzg1MzM2M2ExNzEwYTEwYmRkMGM4ZDU2NzY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDib02BVMOHExd5fFidvi8HbpbWd2EZJ9nqsvDe9pMdM57m ese34yVdv6hvNpnzcjkw2+7EokvQ1CMbOl4yBGBkPtJA3+p66nG0jyMLZ9WAqGbu B7MqvvJ5g8qKb5tZBcRLh0npLG2TrLxQRVcfjad5LPwwtkIya8cUcw1wCd1QPI7r qsBi2UYqQ/Au/q3aICgNkzWAoSkGnMsBM1KjZRgXP2+oL8atP6ZhowyH9Jbdln/w bOMx4WcC/vb3ne95zP/oYOmELk/KN0uOW+Wtn6Ft59qj650clWefXJzifNpEkSBY GZdFC2KYizYyVYVtahLx9MdeU2MnMG+LPgXg8VvvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3rwY8uy792iXEtjcCHktHJTc+CEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyYzUwMzQ1LTY1NjktNDY0Yy04NGYzLTY2OWJlNjE4NTNmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrYAwDQYJKoZIhvcNAQELBQADggEBACH/PU8T7vUzs0W2yhGH76Nf39Kk uMeb07BWFWwtslttJ5lJibHhwUcfJTfh6X9+j4ve3GusmGFHxcbaRDjE90Fqx9ps uajiataesHF3lljKvwk6ZoxH4IeYgj2GM1r5z4UV/Xc1eLi7irIECefoFd940Qg5 FJQTel+VoDFqLtI+gHD2EUyvl8/DN9SwryqjyfDTaJSpNJX1dTZD9VqADHOwnwC6 YlXuIEBgWXnrYLg7cTbRN0dHrsROMe79Bj5mW2eAtQcINHghvOyQ2ySF/0FcH3LF z/JnhnRjMOF8ivdCxU3kda0olO0jpDvxZ88RsWZtYPEzlvFi1DFg4TDwLho= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:43 2025 by rpki-client